Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-05 22:41:07 UTC
Home > List all groups > List all tools > List all groups using tool Alma Communicator
 Tool: Alma Communicator
Names Alma Communicator
Category Malware
Type Backdoor, Tunneling
Description
(Palo Alto) Recently, we observed a new version of the Clayslide delivery document used to
install a new custom Trojan whose developer calls it “ALMA Communicator”. The delivery
document also saved the post-exploitation credential harvesting tool known as Mimikatz,
which we believe the threat actors will use to gather account credentials from the
compromised system.
Information
Malpedia Last change to this tool card: 13 May 2020
Download this tool card in JSON format
All groups using tool Alma Communicator
Changed Name Country Observed
APT groups
 OilRig, APT 34, Helix Kitten, Chrysene 2014-Sep 2024
1 group listed (1 APT, 0 other, 0 unknown)
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=0b467acc-1e16-4e2d-9946-0e84e679c343
Page 1 of 2

Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=0b467acc-1e16-4e2d-9946-0e84e679c343
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=0b467acc-1e16-4e2d-9946-0e84e679c343
Page 2 of 2